Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/mmlqyHFEi9s36pRVA4gNMgQlF2g.roa
File: mmlqyHFEi9s36pRVA4gNMgQlF2g.roa (raw, json)
Hash identifier: YympqoHO3U16jsidTLFW4dJCW3ZK0+I6AcUV13swo18=
Subject key identifier: 9A:69:6A:C8:71:44:8B:DB:37:EA:94:55:03:88:0D:32:04:25:17:68
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01A041C3B68CFEB09E172331AFDB290B6527
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/mmlqyHFEi9s36pRVA4gNMgQlF2g.roa
Signing time: Thu 27 Aug 2026 05:49:00 +0000
ROA not before: Thu 27 Aug 2026 05:49:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
31.209.96.0/24 maxlen: 24
31.209.97.0/24 maxlen: 32
31.209.100.0/23 maxlen: 32
31.209.102.0/23 maxlen: 32
31.209.104.0/23 maxlen: 32
31.209.106.0/24 maxlen: 32
31.209.107.0/24 maxlen: 32
31.209.108.0/22 maxlen: 32
31.223.187.0/24 maxlen: 24
45.10.192.0/24 maxlen: 32
45.10.193.0/24 maxlen: 32
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.150.252.0/23 maxlen: 23
45.150.254.0/23 maxlen: 23
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
46.16.32.0/24 maxlen: 32
80.73.243.0/24 maxlen: 24
80.246.30.0/24 maxlen: 32
81.21.232.0/22 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
103.21.52.0/24 maxlen: 32
103.24.232.0/22 maxlen: 32
103.71.60.0/24 maxlen: 32
103.76.255.0/24 maxlen: 32
103.81.230.0/23 maxlen: 23
103.113.208.0/22 maxlen: 22
103.145.75.0/24 maxlen: 32
103.198.254.0/23 maxlen: 23
103.204.222.0/23 maxlen: 32
103.221.52.0/22 maxlen: 32
103.228.200.0/22 maxlen: 32
103.251.26.0/23 maxlen: 23
104.36.50.0/24 maxlen: 32
109.104.142.0/23 maxlen: 32
116.206.96.0/22 maxlen: 32
137.59.60.0/22 maxlen: 32
167.160.96.0/24 maxlen: 32
167.160.97.0/24 maxlen: 32
167.160.98.0/24 maxlen: 32
178.251.234.0/23 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.222.213.0/24 maxlen: 24
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
194.126.179.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
195.225.81.0/24 maxlen: 24
199.249.223.0/24 maxlen: 32
2a01:4740::/32 maxlen: 48
2a05:28c0::/29 maxlen: 48
2a05:6700::/29 maxlen: 48
2a05:f4c0::/29 maxlen: 48
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 48
2a06:5000::/29 maxlen: 48
2a06:5700::/29 maxlen: 48
2a06:5740::/29 maxlen: 48
2a06:5800::/29 maxlen: 48
2a06:6580::/29 maxlen: 48
2a06:7340::/29 maxlen: 48
2a06:8100::/29 maxlen: 48
2a06:8140::/29 maxlen: 48
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:c3:b6:8c:fe:b0:9e:17:23:31:af:db:29:0b:65:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Aug 27 05:49:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a696ac871448bdb37ea945503880d3204251768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:b9:c1:5a:52:27:11:29:61:08:ff:9b:29:
30:eb:b9:c8:7b:4d:8a:3f:2c:06:1c:e9:e7:ce:ad:
ac:e4:ad:3c:d4:b4:d0:2b:39:79:1c:c2:e9:c4:d7:
c0:b0:9e:a3:69:d3:6a:25:9d:9e:19:e2:a4:66:80:
e0:90:91:fe:9c:6c:f7:ab:7f:c1:5b:57:56:30:cb:
75:9f:a6:b7:c8:8f:48:7c:12:33:e0:fd:c3:a1:74:
e3:e7:56:f3:b8:6e:79:0f:a5:8f:e9:86:56:6f:d4:
9f:24:b3:2f:6d:25:6a:b2:d3:e4:2b:b4:06:86:a2:
92:cb:44:00:13:7e:9b:96:4a:4c:be:f4:b1:fc:97:
46:77:5d:88:e4:18:d7:21:a7:c5:22:a8:5e:cd:b6:
d1:e9:5d:ce:58:e3:54:c6:d0:f1:c2:61:8d:2d:20:
76:fd:f1:1c:39:50:42:a7:99:41:36:dd:70:0f:64:
fa:da:b2:5c:d5:cb:94:e9:3f:d0:50:f1:23:6f:1e:
ef:f0:55:44:31:9a:68:cf:8a:89:b5:e2:02:59:dc:
e7:7c:72:dc:5b:38:57:85:e3:b9:18:b0:67:e0:b8:
52:01:d5:f2:2c:f3:0a:c2:44:d3:ec:26:86:14:41:
0b:a6:0f:e2:01:6e:a2:ea:e3:05:e8:12:26:14:eb:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:69:6A:C8:71:44:8B:DB:37:EA:94:55:03:88:0D:32:04:25:17:68
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/mmlqyHFEi9s36pRVA4gNMgQlF2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
31.209.96.0/23
31.209.100.0-31.209.111.255
31.223.187.0/24
45.10.192.0/23
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.150.252.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
46.16.32.0/24
80.73.243.0/24
80.246.30.0/24
81.21.232.0/22
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
103.21.52.0/24
103.24.232.0/22
103.71.60.0/24
103.76.255.0/24
103.81.230.0/23
103.113.208.0/22
103.145.75.0/24
103.198.254.0/23
103.204.222.0/23
103.221.52.0/22
103.228.200.0/22
103.251.26.0/23
104.36.50.0/24
109.104.142.0/23
116.206.96.0/22
137.59.60.0/22
167.160.96.0-167.160.98.255
178.251.234.0/23
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.222.213.0/24
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
194.126.179.0/24
195.47.194.0/24
195.225.81.0/24
199.249.223.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:6700::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:5740::/29
2a06:5800::/29
2a06:6580::/29
2a06:7340::/29
2a06:8100::/29
2a06:8140::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
3d:00:44:b0:ee:34:68:8d:2b:f9:9e:7d:38:cc:03:d4:35:d0:
7a:c9:74:7a:de:bd:00:4f:1a:df:ec:de:b8:bf:05:a4:16:4b:
65:2f:31:03:71:04:c1:2d:cf:6c:7d:01:78:5e:98:72:81:50:
5d:01:34:be:c8:cc:cd:36:82:08:22:ce:d1:1b:6e:d5:eb:97:
fc:b2:ba:8b:05:0d:fc:8a:7f:13:53:e8:af:e1:91:fc:49:b0:
9f:18:8a:a6:c7:86:4a:61:ca:5e:49:4d:37:87:ca:ea:25:09:
d6:2c:9d:9b:14:41:88:dd:34:96:63:22:db:f2:99:9d:a9:ec:
32:73:66:91:29:47:64:ef:8c:6c:9a:fb:ec:d0:1f:81:71:e3:
00:38:e4:45:b9:5c:b1:2e:4a:5c:2d:90:dd:a2:c4:ae:a5:0f:
e9:7c:9e:e3:15:df:e9:ac:51:f5:45:48:02:79:cf:0f:57:e2:
c8:93:1c:b3:06:9a:ef:0e:28:89:38:d7:96:7b:fb:b1:d7:eb:
fc:6c:ef:17:f6:d6:63:f2:ee:f3:f0:d9:ba:70:69:d8:74:d3:
3a:72:3f:f5:6b:5b:db:a5:6c:ca:ca:42:5c:06:1a:14:fb:a3:
8f:e2:47:9e:7f:29:a4:f8:6b:a9:93:e3:c2:7b:8b:69:c3:3f:
37:7f:99:91
-----BEGIN CERTIFICATE-----
MIIHMzCCBhugAwIBAgISAaBBw7aM/rCeFyMxr9spC2UnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjYwODI3MDU0OTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTY5NmFjODcxNDQ4YmRiMzdlYTk0NTUwMzg4MGQzMjA0MjUxNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7i5wVpSJxEpYQj/mykw67nIe02K
PywGHOnnzq2s5K081LTQKzl5HMLpxNfAsJ6jadNqJZ2eGeKkZoDgkJH+nGz3q3/B
W1dWMMt1n6a3yI9IfBIz4P3DoXTj51bzuG55D6WP6YZWb9SfJLMvbSVqstPkK7QG
hqKSy0QAE36blkpMvvSx/JdGd12I5BjXIafFIqhezbbR6V3OWONUxtDxwmGNLSB2
/fEcOVBCp5lBNt1wD2T62rJc1cuU6T/QUPEjbx7v8FVEMZpoz4qJteICWdznfHLc
WzhXheO5GLBn4LhSAdXyLPMKwkTT7CaGFEELpg/iAW6i6uMF6BImFOvZjwIDAQAB
o4IEPzCCBDswHQYDVR0OBBYEFJppashxRIvbN+qUVQOIDTIEJRdoMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvbW1scXlIRkVpOXMzNnBSVkE0Z05NZ1FsRjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICUwYIKwYBBQUHAQcBAf8EggJCMIICPjCCAYgEAgABMIIB
gAMEAAWargMEAR/RYDAMAwQCH9FkAwQEH9FgAwQAH9+7AwQBLQrAAwQCLV8YAwQC
LZBYAwQCLZUcAwQCLZb8MAwDBAAtmZ0DBAUtmYADBAItnOADBAAuECADBABQSfMD
BABQ9h4DBAJRFegDBABWabcDBABX7/8DBABZI/kDBABZKBgDBABZLM0DBABb5NgD
BABeLs4DBABnFTQDBAJnGOgDBABnRzwDBABnTP8DBAFnUeYDBAJncdADBABnkUsD
BAFnxv4DBAFnzN4DBAJn3TQDBAJn5MgDBAFn+xoDBABoJDIDBAFtaI4DBAJ0zmAD
BAKJOzwwDAMEBaegYAMEAKegYgMEAbL76gMEALkk/gMEALlgogMEAblsaAMEArmY
JAMEArmY+AMEALmZlwMEArmgLAMEALmmVAMEALm45AMEALm8PQMEALnJvAMEArnZ
QAMEALne1QMEALny2QMEALx3mgMEAMEkWQMEAMJ+swMEAMMvwgMEAMPhUQMEAMf5
3zCBrwQCAAIwgagDBQAqAUdAAwUDKgUowAMFAyoFZwADBQMqBfTAAwUDKgYwQAMF
AyoGRsADBQMqBkoAAwUDKgZQAAMFAyoGVwADBQMqBldAAwUDKgZYAAMFAyoGZYAD
BQMqBnNAAwUDKgaBAAMFAyoGgUADBQMqBt+AAwUDKgbkgAMFAyoHR4ADBQMqB5yA
AwUDKgfywAMFAyoKMIADBQMqCz9AAwUDKgzYwAMFAyoM7EAwDQYJKoZIhvcNAQEL
BQADggEBAD0ARLDuNGiNK/mefTjMA9Q10HrJdHrevQBPGt/s3ri/BaQWS2UvMQNx
BMEtz2x9AXhemHKBUF0BNL7IzM02gggiztEbbtXrl/yyuosFDfyKfxNT6K/hkfxJ
sJ8YiqbHhkphyl5JTTeHyuolCdYsnZsUQYjdNJZjItvymZ2p7DJzZpEpR2TvjGya
++zQH4Fx4wA45EW5XLEuSlwtkN2ixK6lD+l8nuMV3+msUfVFSAJ5zw9X4siTHLMG
mu8OKIk415Z7+7HX6/xs7xf21mPy7vPw2bpwadh00zpyP/VrW9ulbMrKQlwGGhT7
o4/iR55/KaT4a6mT48J7i2nDPzd/mZE=
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:49:56 2026 by rpki-client